help

Viruses and worms
1

i cant seem to get rid of this file mibffooshdw.exe my avast wont update keep getting an error message i have windows 7 and this is in my taskbar plz help

2

try MBAM http://www.malwarebytes.org/

3

thanx for the reply but ive tried that and it keeps saying it clear how do i switch of my system restre on windows 7 maybe it keeps coming bk through that ??? i also ran avast and it picked the
mibffooshdw.exe file up and i put it in the chest twice it cracking me up lol … my avast automatically updated but i cant update manually

4

Follow this guide from Essexboy and post the log`s
http://forum.avast.com/index.php?topic=53253.0

To avoid using 20 post with copy and paste you have to attach the log`s

Lower left corner: Additional Options > Attach ( OTL.Txt and Extras.Txt. and MBAM scan log )

5

here is the log

6

i dont know if ive done this right sorry

7

you have not run OTL and posted the OTL.Txt and Extras.Txt.

8

i cant get otl keeps saying cant find server

9

link provided has additional “http//” for some reason, erase it(in url adress bar) and it’ll work

or just press THIS

10

Fixt :-[

11

And you did not update Malwarebytes before you scanned, you with an old database 4052, the latest is 4539
Malwarebytes is releasing updates 3-4-5 times a day so always run update before you scan…

12

here are 2 of them

13

here is the other 2 thankyou for your help

14

forgot thsi one sorry thankyou for all your help

15

On completion of these runs can you let me know what problems remain

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

:OTL DRV - (oflpydin) -- C:\Users\Lee\AppData\Local\Temp\oflpydin.sys File not found IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:6522 [2010/08/31 13:55:32 | 000,000,000 | ---D | C] -- C:\Users\Lee\AppData\Local\ovpndnxtx

:Files
ipconfig /flushdns /c

:Commands
[purity]
[emptytemp]
[EMPTYFLASH]
[CREATERESTOREPOINT]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

THEN

Download ComboFix from one of these locations:

Link 1
Link 2

* IMPORTANT !!! Save ComboFix.exe to your Desktop

[*]Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools

[*]Double click on ComboFix.exe & follow the prompts.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.

16

thankyou for your help did i do it right thanx again

17

thankyou

18

thankyou

19

Looks like your user32.dll is corrupt - lets see if you have a spare. Meanwhile what other problems do you have ?

[*]Start OTL.
[*]Select All Users
[*]Under the Custom Scan box paste this in

/md5start
user32.dll
/md5stop

[*]Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.

[*]Please attach the log when run

20

my antivirus wouldnt manually update and windows wouldnt update but my windows did an update before after all the scans i did but thats it apart from picking up the virus its still in my taskbar notifications but it ses its not active